home

EMG Technology Limited

Publisher Information

EMG Technology Limited is a software publisher located in Hong Kong*. Software developed by EMG Technology Limited has been typically classified as potentially unwanted software. There is one additional code signing certificate issued to this publisher.
Authority:
GlobalSign nv-sa

Valid from:
7/31/2013 1:20:50 AM

Valid to:
8/1/2014 1:20:50 AM

Subject:
CN=EMG Technology Limited, O=EMG Technology Limited, L=HongKong, S=HongKong, C=HK

Issuer:
CN=GlobalSign CodeSigning CA - G2, O=GlobalSign nv-sa, C=BE

Serial number:
11214b00008da514b60ed8ee5329e4df7f28

Scanner detections:
Detections  (72% detected)

Scan engine
Details
Detections

Reason Heuristics
Win32.Generic, Common.PartOf.CRuntimePackaged.PUP.Optional.EMGTechn, Common.PartOf.PUP.Optional.EMGTechn, Threat.Win.Reputation.IMP, Win32.Generic.EMGTechnology.Meta, Win64.Generic
94.44%

Vba32 AntiVirus
AdWare.D365
22.22%

Dr.Web
Adware.Shopper.326, Adware.Mutabaha.50, Win32.Sector.22
16.67%

Trend Micro House Call
TROJ_GEN.F47V1109, PE_SALITY.ER
11.11%

ESET NOD32
Win32/ELEX (variant)
11.11%

IKARUS anti.virus
not-a-virus:AdWare.Win32.D365
11.11%

NANO AntiVirus
Virus.Win32.Sality.bzkem, Riskware.Win32.D365.csnrev
11.11%

G Data
Win32.Sality, Win32.Application.Airzip
11.11%

Baidu Antivirus
Virus.Win32.Sality.$Emu, Adware.Win32.ELEX
11.11%

herdProtect (fuzzy)
a variant of aad4b1eb790a14b9e202f18cc828c6769278c7e0
5.56%

1 / 68      (Adware)
eshellctx64.dll (WinZipper by 337 Technology Limited)  (4964cea0ac12da69ab7a567b402896fb)

1 / 68      (PUP)
eInstall.exe (eCyber by Woodtale Technology)  (2947ee4d7fd0ae068494d65580830aa6)

6 / 68      (PUP)
airzip_ie.exe (TODO: <Product name> by Woodtale Technology)  (9f9116f8a8be1c9cdc3bcaf8b2310a51)

1 / 68      (PUP)
ouilibnl.dll (OUI by Woodtale Technology)  (4658bca888271c67724777504b55618f)

2 / 68      (inconclusive)
libpng.dll (LibPNG)  (fc330d4516075fcad3eae633bbf81770)

1 / 68      (inconclusive)
7z.dll (7-Zip by Igor Pavlov)  (5788092fc9df22ada4c6ea6fa49deaa2)

1 / 68      (PUP)
ws_a_test_br_201382102320.exe (by SoftStud)  (5bc7220b2339dc593ec74c8e3c741941)

38 / 68    (PUP)
traydownloader.exe (Tray downloader by Woodtale Technology)  (0167ca58d9b19852f370740d987f3e66)

1 / 68      (PUP)
eUninstall.exe (eCyber by Woodtale Technology)  (1a10511f3c6c32c91cd6dca492e59564)

1 / 68      (PUP)
dup.exe (DUP by Woodtale Technology)  (d5a78dea9187cb27b94b54622ce9aafa)

1 / 68      (PUP)
AirZip.exe (AirZip by Woodtale Technology)  (2a9146797428e762d9de3a29cf392494)

3 / 68      (PUP)
airzip_chrome.exe (TODO: <Product name> by Woodtale Technology)  (a86570f81bae810f0784c0f53674ade4)

1 / 68      (Adware)
eshellctx.dll (WinZipper by 337 Technology Limited)  (8bdc2137fbc5f89dbf6f00ddbafdfb41)

2 / 68      (inconclusive)
sqlite3.dll  (c83fea5d1ba66fd812aff2281bcdf5de)

1 / 68      (inconclusive)
msvcp100.dll (Microsoft Visual Studio 2010 by Microsoft)  (ee0a803d30458df174aee272055c8d19)

1 / 68      (inconclusive)
msvcr100.dll (Microsoft Visual Studio 2010 by Microsoft)  (31d3e9092e31bfca7c4df89163f1c24f)

1 / 68      (PUP)
ebase.dll (EBASE by Woodtale Technology)  (3d2d413b72a2e4c4f74b73a688907878)

3 / 68      (PUP)
winzipersvc.exe (dsk service by Woodtale Technology)  (83504cdf660f217b589e76d09861cf04)

Downloads URLs for files signed by EMG Technology Limited.

6 / 68      (PUP)
http://airzip.webssearches.com/.../airzip_IE.exe  (9f9116f8a8be1c9cdc3bcaf8b2310a51)

3 / 68      (PUP)
http://airzip.webssearches.com/.../airzip_Chrome.exe  (a86570f81bae810f0784c0f53674ade4)

The following websites host and distribute files published by EMG Technology Limited.

airzip.webssearches.com

The following certificate is also signed by EMG Technology Limited.

112136DF78BA354C6C763C09F7EE7378FAE3  (May 21, 2014 to May 22, 2015)

The following publishers (by Authenticode signature organization name) are related.

WOODTALE TECHNOLOGY INC

337 Technology Limited

* Note, the details and description above are based on the code signing digital signature issued to EMG Technology Limited by GlobalSign nv-sa on July 31, 2013 with the serial number '11214b00008da514b60ed8ee5329e4df7f28'.
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.